Chaning the CORS support of webapp

Now the client requests every time with X Requested With option.
The server responds always with Access-Control-Allow-* while it returns
204, No Content on an OPTION request.